- Zope - Zope lists

Aquire permission settings
by Jonny Karlsson (Rivermen) 09 Nov '01

09 Nov '01

Hi I'm new to Zope and have a problem with permissions on a zope site. If I unchecks the Aquire permission settings (APS) for one of the Instances and checks the permission to Owner, none of the instances works. Expample: if I changes the APS for instance_1, loggs in with Owner2 and accesses instance_2 it does not work. The function with the permission is to let the owner view and run his instance, but none of the other instances. The site structure: Root Folder -Products --ProductName ---ClassName -Site (Security: APS on all) --SubFolder (Security: APS on a few, manager on the rest, none on owner, User has Access contents information, Change Configuration, View) ---Instances_1_of_ClassName Owner1 (Security: APS on all, else it does not work) ---Instances_2_of_ClassName Owner2 (Security: APS on all, else it does not work) ---Instances_3_of_ClassName Owner3 (Security: APS on all, else it does not work) ---Instances_4_of_ClassName Owner4 (Security: APS on all, else it does not work) ---Instances_5_of_ClassName Owner5 (Security: APS on all, else it does not work)

1 0

authorisation failure on Netscape 6.2 ???
by Courrier 09 Nov '01

09 Nov '01

hello, I've got a strange problem with Netscape 6.2. He does'nt care of any Authorisation. I've protected a folder with the view property : it work fine under IE 6 but not under Netscape 6.2. The problem remain the same on "manage mode" and "product mode". Is there a Netscape 6.2 problem or a Zope configuration Problem ??? Thanks a lot Xavier

1 0

Debian Startup Script needed
by Zope 09 Nov '01

09 Nov '01

I've got 2.4.2 successfully installed on my new Debian (potato) box. It runs just fine. Unfortunately, I can't seem to get a workable startup script. I've already changed the RedHat daemon command to Debian's daemon-stop-start, but even with that, I just get the same results as if I'd issued the famous ./start command. It brags about how it's running servers on the usual ports, and just sits there. This is especially problematic at boot time, since nothing after /etc/rc2.d/S20zope runs. So, I put out this call: If you've got Zope starting automatically on a Debian system, could you please share your startup script? Thanks! Howard Hansen http://howard.editthispage.com

2 1

using variables in dtml
by Steven Turoff 09 Nov '01

09 Nov '01

Sorry for such a basic question, but I'm having problems accessing variables in dtml. I want to list the subfolders of a user's folder. Something like: <dtml-let myUser="_.SecurityGetUser().getUserName()"> <dtml-in expr="members.myUser.objectValues('Folder')"> <li><dtml-var title_or_id></li><br> </dtml-in> But this results in an error because of the reference to 'myUser'. How do I user this variable? Thanks, Steve

2 1

Changing Zope's 'basic realm'
by Stuart Nicholson 09 Nov '01

09 Nov '01

I'm building a WAP service using Zope and basic HTTP authentication. I've noticed that when refused a URL because user is unauthorised some WAP cell phones display prompts like 'Authentication required for Zope' to the user. I would like to change this prompt to match my product's name (otherwise users are likely to become confused) but I can't quite figure out how... So far I've tried (without luck): 1) Changing the hardcoded 'realm' attribute in ZPublisher/HTTPResponse.py and restarting Zope. 2) Changing the Root folder title property. Am I missing something? Can anybody suggest a solution? Thanks, Stuart Nicholson Software Engineer wirelessdata - making data fly ---------------------------------------------------------------------- The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. Wirelessdata Ltd is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt. ----------------------------------------------------------------------

2 1

RE: [Zope] BTreeFolders + Catalog + lots of objects?
by sean.upton＠uniontrib.com 08 Nov '01

08 Nov '01

The proxy objects exist in the odb to provide the ability to catalog each record. Right now, I've worked with sets of up to 20k objects indexed in a Catalog using several field and globbing text indexes without issue. As for cataloging them (and hoping for the best), I will likely use sub-transactions in the method in my container that mass-rebuilds (and thus reindexes) the BTreeFolder's contained objects, which will use some very small fields in the relational database obtained via methods that grab them from the database. Each record in the database total is about 400 bytes, so fairly small, and I don't plan on storing much metadata in the Catalog, but I imagine that the search index will be at least 100MB... The fields are small, mostly customer information (name, address, that sort of thing), and the main reason I want to catalog them is that I want customer service reps to be albe to do a globbing full-text search on a portion of a full-name field that isn't always consistent (i.e. "John Doe" vs. "Doe, John" or all kinds of other variants). Sean -----Original Message----- From: Chris Withers [mailto:chrisw@nipltd.com] Sent: Thursday, November 08, 2001 12:13 AM To: sean.upton(a)uniontrib.com Cc: zope(a)zope.org Subject: Re: [Zope] BTreeFolders + Catalog + lots of objects? sean.upton(a)uniontrib.com wrote: > > Has anyone used the BTreeFolder product to store hundreds-of-thousands or > millions of objects? Nope. > I'm developing an internal CRM system that will contain somewhere between > 300k-500k records, stored in a back-end relational datastore, and exposed > via metadata proxy objects (1-per-record) sitting in a container subclassed > from BTreeFolder; Is there any particular reason the proxy objects need to live in the ZODB? > I am wondering if anybody has done anything similar to this, in terms of > number of objects stored in a BTreeFolder, and the type of storage that they > used. I'm also wondering about anyone using ZCatalog for such a large > number of indexed objects. I'm having infinite ammounts of fun (not!) attempting to index 40,000 word documents. It largely depends on what types of indexes you will be using on these objects and what size the objects themselves are. If the objects are anything more than extremely simple and small proxies, I reckon you'll run into problems with BTreeFolder. Likewise, if you're indexing is anything other than simple Field indexing (and with that number of objects, even that may be enough) you won't successfully index that many objects. It's go for sticking the lot in your relational backend. cheers, Chris (who's had his faith in ZODB scalability systematically destroyed over the last couple of months :-( ) > > I'm also thinking of overriding BTreeFolder.manage_main_listing() with a > user interface that allows users to simply type in an object id into a text > box, instead of listing them (the string object ids correspond to a long > integer from 1..n); it wouldn't work very well to list half-a-million > objects in a html-form select control... Ideally, I'd do batching of some > sort, but I'm having trouble figuring out how I would do that. > > Anyone have any thoughts? > > Sean > > ========================= > Sean Upton > Senior Programmer/Analyst > SignOnSanDiego.com > The San Diego Union-Tribune > 619.718.5241 > sean.upton(a)uniontrib.com > ========================= > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev )

2 1

OOBTree's and persistence problems
by Christian Theune 08 Nov '01

08 Nov '01

Hi, I have some problems with OOBTrees and the persistence machinery - I think. My situation is following: a class has an attribute 'pkgDB', which is an OOBTree. When I assign a value to a key ( e.g. pkgDB['key'] = 'value' ) in a function call, then the value is set. When I know restart Zope, the value is still there - as I expected it to be. Now, when I assign another OOBTree as a value to the first tree ( pkgDB['key'] = OOBTree() ) I can also assign values to the tree and see the values in later transactions, so it gets committed correctly. But when I know restart zope, the changes made to the OOBTree seem to be lost. So I think the ZODB doesn't recognize the change to the embedded OOBTree. The same is also with PersistentMapping. Regards Christian -- Christian Theune - ct(a)gocept.com gocept gmbh & co.kg - schalaunische strasse 6 - 06366 koethen/anhalt tel.+49 3496 3099112 - fax.+49 3496 3099118 mob. - 0178 48 33 981 reduce(lambda x,y:x+y,[chr(ord(x)^42) for x in 'zS^BED\nX_FOY\x0b'])

2 1

RE: [Zope] Question about the base href that Zope adds automatica lly
by Thom Wysong 08 Nov '01

08 Nov '01

Pieter Claerhout wrote: >>> can anyone explain me why zope always adds the <base href="http://my.server.com/" /> to every HTML file it's serving. .... is there an easy way to get rid of this if it's not necessary? <<< We just ran into this same problem today. We explored many options, including commenting the "self.insertBase" line out of HTTPResponse.py. What ended up being the simplest solution, as was mentioned earlier in this thread, is adding <base /> to our html files immediately following the <head> tag. <html> <head> <base /> <title>Joe's Web Site</title> </head> <body> Welcome to Joe's Web Site. </body> </html> This is enough of a tag that Zope leaves the html alone and does not insert its own <base> tag. Yet, it's not enough information for the browser to do anything with. So the browser ignores the tag and dynamically figures out the BASE variable for each page on the web site. In practical terms, this ended up having the same affect as commenting "self.insertBase" out of the source code - but without having to remember to re-comment-out that line every time we upgrade our version of Zope. The only caveat that we've found with this, as was also mentioned earlier in this thread, is that every link to a directory on the site needs to end with a slash. Zope returns a "Resource not found" error when attempting to link to a directory that ends without a slash. Bad Link : <a href="directory_one">Directory One</a> Good Link: <a href="directory_one/">Directory One</a> -Thom

1 0

whats wrong with this code
by Clark OBrien 08 Nov '01

08 Nov '01

These two lines of code won't work in zope scripts item = {} item['hello'] = 'bye' they give a len() of unsized object error

4 3

RE: [Zope] Quick Security Question (Anonymous "Add Documents, Ima ges, and Files")
by Jeffrey Robinson 08 Nov '01

08 Nov '01

It may be easier/safer to use the proxy tab on your python script to give it "manager" status (or the like) giving only the script the ability to upload images. Without a proxy the script would run with the permissions of the requesting user. Jeff > -----Original Message----- > From: Adam Warner [SMTP:lists@consulting.net.nz] > Sent: Thursday, November 08, 2001 6:58 AM > To: zope(a)zope.org > Subject: [Zope] Quick Security Question (Anonymous "Add Documents, > Images, and Files") > > Hi all, > > I have a python script that does a manage_addFile (it generates a cached > version of a converted file the first time the page is viewed). To allow > anon users to access the page itself I've had to allow anon "Add > Documents, Images, and Files" in the root folder security. I've disabled > it again while I await confirmation. > > These are the only options available to me in the python script's security > settings: > > Access contents information > Change Python Scripts > Change bindings > Change cache settings > Change permissions > Change proxy roles > Delete objects > Manage WebDAV Locks > Manage properties > Take ownership > Undo changes > View > View History > View management screens > WebDAV Lock items > WebDAV Unlock items > WebDAV access > > My question is: Does enabling website wide anonymous "Add Documents, > Images, and Files" mean users will be able to upload files, etc. > indiscriminately? Or does it just mean anon user-initiated scripts and > forms that generate files will work? > > Thanks, > Adam

2 1